Legal information

This notice describes how LukGud (the trading name of Daniel Quaresma Afonso) collects and processes personal data when you use this website or contact the studio. It is published under the EU General Data Protection Regulation (2016/679) and Portuguese Law 58/2019.

The data collected is limited to what you provide directly: your name and email through the contact form or the discovery call booker, an optional company name and project note, and the project area and stage you indicate. Server logs retain the IP address of incoming requests for spam protection and security monitoring only.

This data is processed for two purposes only: responding to your enquiry, and scheduling and confirming the discovery call. It is never sold, never shared with third parties for marketing, and never transferred outside the European Economic Area. The only processors involved are the providers of the calendar (Cal.com), the email infrastructure used to send confirmations, and the hosting platform (Vercel).

Contact-form messages are retained for twenty-four months from the date of last correspondence. Booking records are retained for thirty-six months to support invoicing and tax obligations. Server logs are retained for ninety days.

Under GDPR Articles 15 to 22, you have the right to request access to your data, correction of inaccuracies, deletion, portability, and restriction or objection to processing. Requests are processed within thirty days. The Portuguese supervisory authority is the CNPD (cnpd.pt).

To exercise any of these rights, or to ask any question about how your data is handled, write to info@lukgud.com.

This website uses only what is strictly necessary to operate: a locale preference cookie that remembers whether you are reading the site in Portuguese or English, and a temporary record in your browser that keeps the intro animation from replaying during the same visit. The booker runs through our own server, with no external widgets, so it sets no third-party cookies. None of this requires consent under the ePrivacy Directive and Portuguese Law 41/2004, because it is essential to the service you asked for, and that is also why you will not find a consent banner here.

No analytics, advertising, or third-party tracking cookies are set. There is no Google Analytics, no Meta Pixel, no remarketing infrastructure of any kind on this site.

If your preferences change, all cookies set by this website can be cleared at any time through your browser's privacy settings. Disabling the technical cookies will not prevent the site from loading, but the booker and the contact form may not function correctly.

This policy is reviewed periodically to remain compliant with the GDPR and the Portuguese Cookie Law (Lei n.º 41/2004 e Decreto-Lei n.º 7/2004).

These terms govern any engagement between you and LukGud (the trading name of Daniel Quaresma Afonso) initiated through this website. Each project is formalised by a separate written contract signed by both parties, which prevails over this general notice in case of conflict.

The services offered are web design and engineering, delivered in the form of fixed-scope engagement tiers (Essential, Professional, Premium) and optional add-ons. Scope, price, timeline, and revision rounds are defined in the project contract and not modifiable except by written change request agreed by both sides.

Intellectual property in works created specifically for your project transfers in full to you upon settlement of the final invoice, as set out in clause 10 of the standard project contract. Open-source components retain their original licences. The studio retains the right to display delivered work in its own portfolio unless the contract states otherwise.

The studio's liability for any claim arising from a project is limited to the total amount paid for that project. The studio is not liable for indirect, consequential, or commercial losses, nor for delays caused by third-party providers, hosting outages, or content not delivered by the client on time.

These terms are governed by Portuguese law. Any dispute that cannot be resolved by negotiation is submitted to the Bragança District Court. These terms may be updated; the current version is the one published on this page on the date shown at the top.

This notice applies if you received a prospecting email from LukGud (the trading name of Daniel Quaresma Afonso) without having contacted the studio first. It describes what data I process, on what basis, and how you can object at any time. It is published under the EU General Data Protection Regulation (2016/679) and Portuguese Law 58/2019, and it satisfies the information requirements of Article 14 GDPR.

The controller is Daniel Quaresma Afonso, sole proprietor (Empresário em Nome Individual), NIF 262886456, with registered office at Rua do Prado Novo, n.º 44, 5300-541 Bragança. For any question about this data, or to exercise your rights, write to info@lukgud.com.

I contact you in your professional capacity, as the owner or decision-maker of a company or practice I consider relevant to the work I do. The data I process is limited to the minimum needed for a single relevant approach: your name, your role, the company, your professional email address, and the address of the public page where I found that information. I do not process data about your private life, I do not associate you with special categories of data, and I use no tracking technology of any kind in my messages.

There is a single purpose: to present LukGud’s work to you, individually and with no obligation, in case it is relevant to your company. The lawful basis is my legitimate interest in approaching professionals with an offer relevant to their activity (Article 6(1)(f) GDPR), weighed against your rights in a written assessment I keep internally and that you may request.

I obtained your data from public professional sources, such as your company’s website, professional directories, or company registers. Each contact is researched individually and I have never bought lists. I will tell you the exact source of your data whenever you ask.

There is no automated decision-making and no profiling within the meaning of Article 22 GDPR. The assessment I make is about the company, not about you, and I review it myself before any contact.

I do not sell your data or share it with third parties for marketing purposes. I use processors for professional email sending and hosting (Google Workspace), for discovering companies from public sources (Apify), for AI assistance with research and drafting (Anthropic), and, only if you consent to receive future communications, for sending those communications (Resend). All of them are contractually bound to process the data only on my instructions. Prospecting records are held in a local database, not in the cloud.

Some of these processors are established in the United States. Any transfer of your data outside the European Economic Area relies on standard contractual clauses approved by the European Commission (Article 46 GDPR) or, where the processor is certified, on the EU-US Data Privacy Framework adequacy decision (Article 45 GDPR). I will send you a copy of these safeguards if you ask at info@lukgud.com.

Data on contacts who never reply is retained for twelve months, after which it is anonymised or deleted. If we exchange correspondence, it is retained for twenty-four months from the date of last contact. If you ask not to be contacted again, I keep your email address on a suppression list permanently, for the sole purpose of making sure I never write to you again.

You can object to this contact at any time, and objection to direct marketing is absolute and immediate (Article 21(2) GDPR). Simply reply “unsubscribe” to any email of mine, or write to info@lukgud.com. I stop sending immediately, remove you from the list within 48 hours, and go quiet, for good.

Under GDPR Articles 15 to 22, you also have the right to request access to your data, correction, deletion, restriction of processing, and portability. These requests are handled within thirty days.

If you consider that the processing of your data does not comply with the law, you have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.